Skip to content

Commit ee996ef

Browse files
committed
feat(ferretdb): ingress setup for mongo express
1 parent 713ed40 commit ee996ef

1 file changed

Lines changed: 44 additions & 0 deletions

File tree

modules/ferretdb/ingress.tf

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
// Kubernetes Ingress for Mongo Express Access
2+
resource "kubernetes_ingress_v1" "mongo_express_ingress" {
3+
metadata {
4+
name = "mongo-express-ingress"
5+
namespace = kubernetes_namespace.namespace.metadata[0].name
6+
labels = {
7+
app = var.app_name
8+
component = "ingress"
9+
}
10+
annotations = {
11+
"nginx.ingress.kubernetes.io/proxy-ssl-verify" : "on"
12+
"nginx.ingress.kubernetes.io/proxy-ssl-secret" : "${kubernetes_namespace.namespace.metadata[0].name}/${kubernetes_manifest.mongo_express_internal_certificate.manifest.spec.secretName}"
13+
"nginx.ingress.kubernetes.io/proxy-ssl-name" : "database.${kubernetes_namespace.namespace.metadata[0].name}.svc.cluster.local"
14+
"nginx.ingress.kubernetes.io/backend-protocol" : "HTTPS"
15+
"nginx.ingress.kubernetes.io/rewrite-target" : "/"
16+
"nginx.ingress.kubernetes.io/proxy-body-size" : 0
17+
"nginx.ingress.kubernetes.io/client-body-buffer-size" : "500M"
18+
}
19+
}
20+
21+
spec {
22+
ingress_class_name = "nginx"
23+
tls {
24+
hosts = ["${var.host_name}.${var.domain}"]
25+
secret_name = kubernetes_manifest.ingress_certificate.manifest.spec.secretName
26+
}
27+
rule {
28+
host = "${var.host_name}.${var.domain}"
29+
http {
30+
path {
31+
path = "/"
32+
backend {
33+
service {
34+
name = kubernetes_service.mongo_express.metadata[0].name
35+
port {
36+
name = "https"
37+
}
38+
}
39+
}
40+
}
41+
}
42+
}
43+
}
44+
}

0 commit comments

Comments
 (0)